test: adds unit tests for policy sub module

Author: nimisha-gj

tests/unit-tests.tftest.hcl

@@ -1,23 +1,23 @@
 # Attribute validations for account sub module
-    run "account_parentId_match" {
-      command = plan
-
-      variables {
-        name               = "some_user_name"
-        email              = "randomPrefix@randomDomain.com"
-        parent_id          = "ou-rndm-parentid"
-        expected_parent_id = "ou-rndm-parentid"
-      }
-
-      module {
-        source = "./modules/account/"
-      }
-
-      assert {
-        condition     = aws_organizations_account.member_account.parent_id == var.expected_parent_id
-        error_message = "Account parent_id mismatch after creation"
-      }
-    }
+run "account_parentId_match" {
+  command = plan
+
+  variables {
+    name               = "some_user_name"
+    email              = "randomPrefix@randomDomain.com"
+    parent_id          = "ou-rndm-parentid"
+    expected_parent_id = "ou-rndm-parentid"
+  }
+
+  module {
+    source = "./modules/account/"
+  }
+
+  assert {
+    condition     = aws_organizations_account.member_account.parent_id == var.expected_parent_id
+    error_message = "Account parent_id mismatch after creation"
+  }
+}
 
 run "account_name_match" {
   command = plan
@@ -185,10 +185,10 @@ run "organization_aws_service_access_principals_match" {
   command = plan
 
   variables {
-    service_access_principals          = ["service1.amazonaws.com", "service2.amazonaws.com"]
+    service_access_principals              = ["service1.amazonaws.com", "service2.amazonaws.com"]
     expected_aws_service_access_principals = ["service1.amazonaws.com", "service2.amazonaws.com"]
-    enabled_policy_types               = ["SERVICE_CONTROL_POLICY"]
-    feature_set                        = "ALL"
+    enabled_policy_types                   = ["SERVICE_CONTROL_POLICY"]
+    feature_set                            = "ALL"
   }
 
   module {
@@ -205,10 +205,10 @@ run "organization_enabled_policy_types_match" {
   command = plan
 
   variables {
-    service_access_principals = ["service1.amazonaws.com", "service2.amazonaws.com"]
-    enabled_policy_types      = ["SERVICE_CONTROL_POLICY"]
+    service_access_principals     = ["service1.amazonaws.com", "service2.amazonaws.com"]
+    enabled_policy_types          = ["SERVICE_CONTROL_POLICY"]
     expected_enabled_policy_types = ["SERVICE_CONTROL_POLICY"]
-    feature_set               = "ALL"
+    feature_set                   = "ALL"
   }
 
   module {
@@ -228,7 +228,7 @@ run "organization_feature_set_match" {
     service_access_principals = ["service1.amazonaws.com", "service2.amazonaws.com"]
     enabled_policy_types      = ["SERVICE_CONTROL_POLICY"]
     feature_set               = "ALL"
-    expected_feature_set          = "ALL"
+    expected_feature_set      = "ALL"
   }
 
   module {
@@ -240,3 +240,173 @@ run "organization_feature_set_match" {
     error_message = "Feature set mismatch after creation"
   }
 }
+
+variables {
+  tag_policy_content = <<EOF
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Allow",
+      "Action": "tag:GetResources",
+      "Resource": "*"
+    }
+  ]
+}
+EOF
+}
+
+run "policy_name_match" {
+  command = plan
+
+  module {
+    source = "./modules/policy/"
+  }
+
+  variables {
+    content       = var.tag_policy_content
+    name          = "STANDARD_TAG_POLICIES"
+    description   = "Recommend tag policies"
+    type          = "TAG_POLICY"
+    expected_name = "STANDARD_TAG_POLICIES"
+    tags = {
+      "some_key_name"    = "some_value"
+      "another_key_name" = "another_value"
+    }
+  }
+
+  assert {
+    condition     = aws_organizations_policy.this.name == var.expected_name
+    error_message = "Policy name mismatch after creation"
+  }
+}
+
+run "policy_content_match" {
+  command = plan
+
+  module {
+    source = "./modules/policy/"
+  }
+
+  variables {
+    content          = var.tag_policy_content
+    name             = "STANDARD_TAG_POLICIES"
+    description      = "Recommend tag policies"
+    type             = "TAG_POLICY"
+    expected_content = var.tag_policy_content
+    tags = {
+      "some_key_name"    = "some_value"
+      "another_key_name" = "another_value"
+    }
+  }
+
+  assert {
+    condition     = aws_organizations_policy.this.content == var.expected_content
+    error_message = "Policy content mismatch after creation"
+  }
+}
+
+run "policy_type_match" {
+  command = plan
+
+  module {
+    source = "./modules/policy/"
+  }
+
+  variables {
+    content       = var.tag_policy_content
+    name          = "STANDARD_TAG_POLICIES"
+    description   = "Recommend tag policies"
+    type          = "TAG_POLICY"
+    expected_type = "TAG_POLICY"
+    tags = {
+      "some_key_name"    = "some_value"
+      "another_key_name" = "another_value"
+    }
+  }
+
+  assert {
+    condition     = aws_organizations_policy.this.type == var.expected_type
+    error_message = "Policy type mismatch after creation"
+  }
+}
+
+run "policy_description_match" {
+  command = plan
+
+  module {
+    source = "./modules/policy/"
+  }
+
+  variables {
+    content              = var.tag_policy_content
+    name                 = "STANDARD_TAG_POLICIES"
+    description          = "Recommend tag policies"
+    expected_description = "Recommend tag policies"
+    type                 = "TAG_POLICY"
+    tags = {
+      "some_key_name"    = "some_value"
+      "another_key_name" = "another_value"
+    }
+  }
+
+  assert {
+    condition     = aws_organizations_policy.this.description == var.expected_description
+    error_message = "Policy description mismatch after creation"
+  }
+}
+
+run "policy_skip_destroy_match" {
+  command = plan
+
+  module {
+    source = "./modules/policy/"
+  }
+
+  variables {
+    content               = var.tag_policy_content
+    name                  = "STANDARD_TAG_POLICIES"
+    description           = "Recommend tag policies"
+    type                  = "TAG_POLICY"
+    skip_destroy          = true
+    expected_skip_destroy = true
+    tags = {
+      "some_key_name"    = "some_value"
+      "another_key_name" = "another_value"
+    }
+  }
+
+  assert {
+    condition     = aws_organizations_policy.this.skip_destroy == var.expected_skip_destroy
+    error_message = "Policy skip_destroy mismatch after creation"
+  }
+}
+
+run "policy_tags_match" {
+  command = plan
+
+  module {
+    source = "./modules/policy/"
+  }
+
+  variables {
+    content     = var.tag_policy_content
+    name        = "STANDARD_TAG_POLICIES"
+    description = "Recommend tag policies"
+    type        = "TAG_POLICY"
+    tags = {
+      "some_key_name"    = "some_value"
+      "another_key_name" = "another_value"
+    }
+  }
+
+  assert {
+    condition     = aws_organizations_policy.this.tags["some_key_name"] == "some_value"
+    error_message = "Tag 'some_key_name' with value 'some_value' is missing or incorrect"
+  }
+
+  assert {
+    condition     = aws_organizations_policy.this.tags["another_key_name"] == "another_value"
+    error_message = "Tag 'another_key_name' with value 'another_value' is missing or incorrect"
+  }
+}